This IP address has been reported a total of
12
times from
10 distinct
sources.
193.142.159.147 was first reported on
April 26th 2022 , and the most recent report was
4 days ago France
with 1
report;
Malta
with 1
report;
Singapore
with 1
report.
The most common categories in these recent reports were:
Bad Web Bot
3
times;
DDoS Attack
2
times;
Brute-Force
2
times;
Web App Attack
2
times;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇲🇹
Malta
2026-10-09 09:43:51
(4 days ago)
193.142.159.147 - - [09/Oct/2026:11:43:50 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ...
show more
193.142.159.147 - - [09/Oct/2026:11:43:50 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-09-23 11:49:10
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 193.142.159.147 (colo-srv-147.sky-link.com.ua): ...
show more
(mod_security) mod_security (id:210350) triggered by 193.142.159.147 (colo-srv-147.sky-link.com.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 07:49:06.808709 2026] [security2:error] [pid 11438:tid 11438] [client 193.142.159.147:53320] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.instalatoribucuresti.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.instalatoribucuresti.com"] [uri "/"] [unique_id "arO8sjOz37x-DD4_YpJBRQAAABM"], referer: https://americanexportimport.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇬
garrymenata
2026-08-23 20:06:44
(1 month ago)
193.142.159.147 - - [24/Aug/2026:01:10:50 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; ...
show more
193.142.159.147 - - [24/Aug/2026:01:10:50 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)"
193.142.159.147 - - [24/Aug/2026:01:10:52 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)"
193.142.159.147 - - [24/Aug/2026:01:10:54 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)"
...
show less
DDoS Attack
Bad Web Bot
🇫🇷
Tilellit.PRO
2026-08-21 01:16:00
(1 month ago)
PrestaShop faceted search filter flooding attempt
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-07-06 10:42:52
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇳🇱
exxos
2025-08-04 17:59:25
(1 year ago)
HTTP1.x attacks
DDoS Attack
🇳🇱
exxos
2025-07-27 22:35:18
(1 year ago)
web exploit attacks
Web App Attack
🇳🇱
exxos
2025-07-06 09:10:40
(1 year ago)
web exploit attacks
Web App Attack
🇺🇸
LARL-Stompro-2024
2025-06-25 02:15:37
(1 year ago)
Evergreen ILS - Mylist Bot Abuse - HTTP Port 443 - Fake UserAgent. Requests:1
Bad Web Bot
2025-02-06 04:15:32
(1 year ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
2025-01-16 17:51:18
(1 year ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.01.16 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.01.16 is noted in report timestamp
show less
Hacking
Brute-Force
🇵🇱
ChillScanner
2022-04-26 02:39:09
(4 years ago)
2 probe(s) @ UDP(53)
Port Scan
Showing 1 to
12
of 12 reports
